Forum Discussion

TESTING_32412's avatar
TESTING_32412
Icon for Nimbostratus rankNimbostratus
Aug 16, 2013

IControl and Cert Expiry

Hi,

 

I have a question,

 

I am little newbie to F5 iControl. Any help would be greatly appreciated.

 

 

In Summary:

What is am trying to is list the associated certificates with a particular F5 virtual server If I do this same things using the F5 console I would follow the following steps

 

1. Open the Virtual server

 

2. Check the client side or server side SSL profile

 

3. Then go to profiles or client or server and get the name of the cert

 

4. Then go to certificates and check the expiry date

 

I have tried the scripts.. Where I am with them is that I can list the pool members and SSL profile, is there any easier way to achieve this.

 

Thanks in advance

 

application delivery
availability
design
devops
iControl
management
performance

4 Replies

Sort By
  • Michael_Yates's avatar
    Michael_Yates
    Icon for Nimbostratus rankNimbostratus
    Aug 16, 2013

    Hi Testing,

    Here are the iControl Methods that you are going to want to dig into to get what you are wanting:

    You can get more detailed information for these methods here: iControl API Reference

    Get Virtual Server List:

    LocalLBVirtualServer.get_list

    Get Virtual Server SSL Profile (Client):

    LocalLBVirtualServer.get_profile

    LocalLBProfileType.PROFILE_TYPE_CLIENT_SSL

    Get Virtual Server SSL Profile (Server):

    LocalLBVirtualServer.get_profile

    LocalLBProfileType.PROFILE_TYPE_SERVER_SSL

    Get SSL Profile List (Client):

    LocalLBProfileClientSSL.get_list

    Get SSL Profile List (Server):

    LocalLBProfileServerSSL.get_list

    Get Certificate List: ManagementKeyCertificate.get_certificate_list

    Get Key List: ManagementKeyCertificate.get_key_list

    • TESTING_32412's avatar
      TESTING_32412
      Icon for Nimbostratus rankNimbostratus
      Aug 21, 2013
      Hi Michael Yates, thanks for a quick and prompt response (Get-F5.iControl).LocalLBProfileClientSSL.get_certificate_file_v2(""); This just gives me the text containing .crt How do i get an expiry date? what i am trying to achieve is i want to check all the Virtual server's that are active in LTM and navigate through its profile, and find out which cert is it using and then find out the expiry date of the cert. any advise is greatly appreciated. thanks, Kumar
  • Michael_Yates_6's avatar
    Michael_Yates_6
    Icon for Cirrus rankCirrus
    Aug 16, 2013

    Hi Testing,

    Here are the iControl Methods that you are going to want to dig into to get what you are wanting:

    You can get more detailed information for these methods here: iControl API Reference

    Get Virtual Server List:

    LocalLBVirtualServer.get_list

    Get Virtual Server SSL Profile (Client):

    LocalLBVirtualServer.get_profile

    LocalLBProfileType.PROFILE_TYPE_CLIENT_SSL

    Get Virtual Server SSL Profile (Server):

    LocalLBVirtualServer.get_profile

    LocalLBProfileType.PROFILE_TYPE_SERVER_SSL

    Get SSL Profile List (Client):

    LocalLBProfileClientSSL.get_list

    Get SSL Profile List (Server):

    LocalLBProfileServerSSL.get_list

    Get Certificate List: ManagementKeyCertificate.get_certificate_list

    Get Key List: ManagementKeyCertificate.get_key_list

    • TESTING_32412's avatar
      TESTING_32412
      Icon for Nimbostratus rankNimbostratus
      Aug 21, 2013
      Hi Michael Yates, thanks for a quick and prompt response (Get-F5.iControl).LocalLBProfileClientSSL.get_certificate_file_v2(""); This just gives me the text containing .crt How do i get an expiry date? what i am trying to achieve is i want to check all the Virtual server's that are active in LTM and navigate through its profile, and find out which cert is it using and then find out the expiry date of the cert. any advise is greatly appreciated. thanks, Kumar